Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

RE: HTTP request working via hostname but not via IP address

Subject: RE: HTTP request working via hostname but not via IP address
Date: Mon, 8 May 2006 16:01:16 +0100
Hi Arjun 

Sorry I don't understand all of the problem..
I'm assuming you are trying to get to a website on iis?

Are there any firewalls involved in the Virtual addressing?
Are you using MS NLB on web servers to virtualises the address?

If so I know there are problems with this, firstly due to the way ISA
firewalls handle NLB and also checkpoints...due to this being a
multicast address.


There are also other thing you need to look at I bet the communication
on the switch is set to using unicast, when the NLB is invoked it uses
multicasting due to a virtual mac address being created..

Hopefully this should lead you into the right direction...


-----Original Message-----
From: Arjun Venkatraman [mailto:arjunishere@gmail.com] 
Sent: 08 May 2006 10:56
To: javier@liendo.net
Cc: pen-test@securityfocus.com
Subject: Re: HTTP request working via hostname but not via IP address

Hey Javier,

The IP i'm trying to reach IS one of two IPs which correspond to a
virtual adress, but this is on an internal network, so the IP I am
aiming for is definitely not virtual.
Any other possibilities?

Cheers
Arjun



On 5/8/06, Javier Liendo <javier@liendo.net> wrote:
hello arjun

check if the website is a virtual website...most probably it is and
that is the reason you can only get at it with the hostname and not
the IP address...

regards

javier

On 5/5/06, Arjun Venkatraman <arjunishere@gmail.com> wrote:
 Hi all,

 I have a pretty basic sort of problem. While sending an HTTP
request
to a machine using a VBScript, when I mention the hostname in the
URL,
the request goes through smoothly. However, when I mention the IP
address explicitly, the request does not go through. I have
confirmed
he IP address multiple times to make sure the error is not a typo.

If the machine name had not been accessible, I would have concluded
that the DNS query was the problem. But with the hostname working
and
the IP not working I am stumped.

Any ideas?

Cheers

Arjun


------------------------------------------------------------------------
------
This List Sponsored by: Cenzic

Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the
Analyst's
Choice Award from eWeek. As attacks through web applications
continue to rise,
you need to proactively protect your applications from hackers.
Cenzic has the
most comprehensive solutions to meet your application security
penetration
testing and vulnerability management needs. You have an option to go
with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed
service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to
confirm your
results from other product. Contact us at request@cenzic.com for
details.

------------------------------------------------------------------------
------




------------------------------------------------------------------------
------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the
Analyst's 
Choice Award from eWeek. As attacks through web applications continue to
rise, 
you need to proactively protect your applications from hackers. Cenzic
has the 
most comprehensive solutions to meet your application security
penetration 
testing and vulnerability management needs. You have an option to go
with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service
can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm
your 
results from other product. Contact us at request@cenzic.com for
details.
------------------------------------------------------------------------
------



-------------------------------------------------------------------
Vanquis Bank Limited. Registered office: Colonnade, Sunbridge Road, Bradford 
BD1 2LQ. Registered number 2558509 England.

Confidentiality. This email (and any attachments) is confidential and intended 
for the recipient(s) only. This email may include proprietary and/or privileged 
information. If you receive this email in error, please immediately notify the 
Vanquis Service desk (servicedesk@vanquisbank.co.uk) and then delete the email 
(and any attachments). Do not show, distribute or copy the contents of this 
email to anyone.

Warning. Although Vanquis Bank has taken reasonable precautions to ensure that 
no viruses are present in this email or attachments, the security of internet 
communications cannot be guaranteed and therefore, Vanquis Bank will not accept 
any liability for loss or damage arising from receipt of this email.

Any statements or opinions contained in this email or attachments are those of 
the author and do not necessarily reflect the views of Vanquis Bank.


-------------------------------------------------------------------


------------------------------------------------------------------------------
This List Sponsored by: Cenzic

Concerned about Web Application Security? 
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's 
Choice Award from eWeek. As attacks through web applications continue to rise, 
you need to proactively protect your applications from hackers. Cenzic has the 
most comprehensive solutions to meet your application security penetration 
testing and vulnerability management needs. You have an option to go with a 
managed service (Cenzic ClickToSecure) or an enterprise software 
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can 
help you: http://www.cenzic.com/news_events/wpappsec.php 
And, now for a limited time we can do a FREE audit for you to confirm your 
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>